Mallox
Mallox is a ransomware group with a financial motive, tracked by Brandefense. It targets 12 sectors, including Technology and Manufacturing, in 24 countries, including the United States and the United Kingdom. It uses 47 MITRE ATT&CK techniques and exploits 23 known CVEs.
Also known as
- TargetCompany
- FARGO
- Tohnichi
- Techniques
- 47
- Exploited CVEs
- 23
- First seen
- Jun 1, 2021
- Last seen
- Apr 27, 2025
- Record updated
Who They Target.
Sectors · 12
Countries · 24
Labelsdata-leak-sitemalloxmssql-exploitationraasransomware
About Mallox.
This ransomware uses a combination of different crypto algorithms (ChaCha20, AES-128, Curve25519). The activity of this malware is dated to mid-June 2021. The extension of the encrypted files are set to the compromised company:.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.